My PlugComputer datacenter, originally uploaded by marcn.

]]> http://nozell.com/blog/2011/04/14/my-plugcomputer-datacenter/feed/ 0 http://nozell.com/blog/2010/03/09/sshguard-on-debianlenny/ http://nozell.com/blog/2010/03/09/sshguard-on-debianlenny/#comments Tue, 09 Mar 2010 16:08:58 +0000 Marc Nozell http://nozell.com/blog/?p=807 The sshguard documentation is correct, but a little lacking.

Here are my notes of what is needed in case I ever need to re-do it:

• Download sshguard-1.4.tar.gz from http://www.sshguard.net/
• Unpack and compile (see the stock documentation on sshguard.net)
• In /etc/rc.local add the following lines before the “exit 0″. This sets up iptables with a filter for ssh connections:

  iptables -N sshguard

  iptables -A INPUT -p tcp --dport 22 -j sshguard

  You should run those commands before you edit the syslog configuration. Or reboot.

• In /etc/syslog-ng/syslog-ng.conf add around line 190 the following lines:

  filter sshlogs { facility(auth, authpriv) and not match("sshguard"); };

  destination sshguardproc {
  program("/usr/local/sbin/sshguard"
  template("$DATE $FULLHOST $MESSAGE\n"));

  };


  And down near the end of the file, add:

  
log { source(s_all); filter(sshlogs); destination(sshguardproc); };


And finally restart syslog-ng (sudo killall -HUP syslog-ng) and read the sshguard faqs: http://www.sshguard.net/docs/faqs/

Functions:

• mail hub
• network print server
• scan server
• mp3 file server
• system monitor
• proxy server

Here are the detailed steps needed to convert this $99 low power server into something useful:

Connect to the SheevaPlug console

* Connect the mini-USB/USB cable to a handy Linux box
* Load the appropriate kernel module:
sudo modprobe ftdi_sio vendor=0x9e88 product=0x9e8f
* Install gtkterm if you don’t already have it:
apt-get install gtkterm
* Configure gtkterm to connect to port /dev/ttyUSB1 (or whatever the SheevaPlug reports as, ls /dev/ttyUSB* to find out)
* Power up and watch the boot

= Start with Martin’s file system =

See the excellent description of getting the Debian/Lenny filesystem snapshot that Martin Michlmayr has provided:
http://www.cyrius.com/debian/kirkwood/sheevaplug/unpack.html

In addition to building an MMC card with the initial Debian file system, also upgrade the firmware to the one provided by user kwonsk at the PlugComputer.org forum. You will likely need to install the tftp server somewhere on your network — apt-get install tftpd and put the u-boot.bin binary in /srv/tftp/

= Initial steps =

* Login as root via the console change the root password: passwd
* Note the ip address (/sbin/ifconfig eth0ntpdate pool.ntp.org
* Change the ssh keys:

rm /etc/ssh/ssh_host*
ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N ""
Generating public/private dsa key pair.
Your identification has been saved in /etc/ssh/ssh_host_dsa_key.
Your public key has been saved in /etc/ssh/ssh_host_dsa_key.pub.
The key fingerprint is:
b0:25:d2:d8:5c:89:9c:07:bc:94:cf:be:26:d5:ee:66 root@debian
The key's randomart image is:
+--[ DSA 1024]----+
| o.=.. |
| =B.o |
| o.*=. |
| ..=o |
| ..S. |
| o . |
| . o |
| . o E |
| o +. |
+-----------------+
ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ""
Generating public/private rsa key pair.
Your identification has been saved in /etc/ssh/ssh_host_rsa_key.
Your public key has been saved in /etc/ssh/ssh_host_rsa_key.pub.
The key fingerprint is:
4f:e4:64:bc:bc:20:5b:3c:7d:8a:5f:b9:70:9c:e2:b5 root@debian
The key's randomart image is:
+--[ RSA 2048]----+
| |
| . |
| = |
| . B . |
| . S * . |
| + * = o |
| . . * B |
| o * o |
| o E |
+-----------------+


* Unless you live in the same region as Martin, change /etc/apt/sources.list to use a closer Debian repository:
perl -pi~ -e 's/ftp.at/ftp.us/' /etc/apt/sources.list

* Same with timezone and locale: dpkg-reconfigure tzdata && dpkg-reconfigure locales

* Pick a hostname, I’m using lordshiva

perl -pi~ -e 's/debian/lordshiva/' /etc/hostname
hostname -F /etc/hostname


* Update/Upgrade
apt-get update && apt-get upgrade

* Add users adduser marc, etc

= Initial tools =

Add openntpd to keep the time in sync

apt-get install openntpd
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
openntpd
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0B/45.7kB of archives.
After this operation, 188kB of additional disk space will be used.
Selecting previously deselected package openntpd.
(Reading database ... 16890 files and directories currently installed.)
Unpacking openntpd (from .../openntpd_3.9p1-7_armel.deb) ...
Processing triggers for man-db ...
Setting up openntpd (3.9p1-7) ...
Starting openntpd: ntpd.


So you don’t get tempted to use root all the time, get sudo and add appropriate user accounts:

apt-get install sudo
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
sudo
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 180kB of archives.
After this operation, 438kB of additional disk space will be used.
Get:1 http://ftp.us.debian.org lenny/main sudo 1.6.9p17-2 [180kB]
Fetched 180kB in 1s (140kB/s)
Selecting previously deselected package sudo.
(Reading database ... 16906 files and directories currently installed.)
Unpacking sudo (from .../sudo_1.6.9p17-2_armel.deb) ...
Processing triggers for man-db ...
Setting up sudo (1.6.9p17-2) ...
No /etc/sudoers found... creating one for you.
lordshiva# visudo
add a line line this:
marc ALL=(ALL) ALL


Log out as root and reconnect as your new username to continue.

= Handy tools =

Install a number of handy tools: emacs (without X), usbutils, telnet, rsync, screen, htop


marc@lordshiva:~$ sudo apt-get install emacs22-nox rsync screen htop sudo: unable to resolve host lordshiva

[sudo] password for marc:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
emacs22-bin-common emacs22-common emacsen-common libasound2
Suggested packages:
emacs22-el emacs22-common-non-dfsg libasound2-plugins
The following NEW packages will be installed:
emacs22-bin-common emacs22-common emacs22-nox emacsen-common htop libasound2 rsync screen
0 upgraded, 8 newly installed, 0 to remove and 0 not upgraded.
Need to get 18.5MB of archives.
After this operation, 63.9MB of additional disk space will be used.
Do you want to continue [Y/n]?


= The avahi daemon =

Avahi is handy on small home networks because it lets you refer to systems with DHCP provided address by name without having to update everyone’s /etc/hosts file. eg: ssh lordshiva.local

sudo apt-get install avahi-daemon
marc@lordshiva:~$ sudo apt-get install avahi-daemon
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
dbus dbus-x11 libavahi-common-data libavahi-common3 libavahi-core5 libdaemon0 libdbus-1-3 libexpat1 libnss-mdns libx11-6 libx11-data libxau6 libxcb-xlib0 libxcb1
libxdmcp6
Suggested packages:
avahi-autoipd
The following NEW packages will be installed:
avahi-daemon dbus dbus-x11 libavahi-common-data libavahi-common3 libavahi-core5 libdaemon0 libdbus-1-3 libexpat1 libnss-mdns libx11-6 libx11-data libxau6
libxcb-xlib0 libxcb1 libxdmcp6
0 upgraded, 16 newly installed, 0 to remove and 0 not upgraded.
Need to get 1721kB of archives.
After this operation, 7250kB of additional disk space will be used.
Do you want to continue [Y/n]?

= Making the SheevaPlug a printserver =

I have an hp PSC 1510 All-in-One printer/scanner that I want to share to the other workstations at home.

Install cups which pulls in a ton of other packages as well as the open source print management tools from Hewlett-Packard, hplip

marc@lordshiva:~$ sudo apt-get install cups hplip
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
avahi-utils cpp cpp-4.3 cups-client cups-common cupsddk cupsddk-drivers
defoma fontconfig fontconfig-config foomatic-db foomatic-db-engine
foomatic-filters gconf2 gconf2-common ghostscript ghostscript-x gksu
gnome-keyring gs-common gs-esp gsfonts hicolor-icon-theme hpijs hplip-data
hplip-gui libatk1.0-0 libatk1.0-data libaudio2 libavahi-client3
libavahi-compat-libdnssd1 libcairo2 libcups2 libcupsimage2 libdatrie0
libdbus-glib-1-2 libdirectfb-1.0-0 libdrm2 libexif12 libffi5 libfontconfig1
libfontenc1 libfreetype6 libgconf2-4 libgksu2-0 libgl1-mesa-glx libglade2-0
libglib2.0-0 libglib2.0-data libglu1-mesa libgmp3c2 libgnome-keyring0
libgphoto2-2 libgphoto2-port0 libgs8 libgtk2.0-0 libgtk2.0-bin
libgtk2.0-common libgtop2-7 libgtop2-common libhal-storage1 libhal1 libice6
libidl0 libieee1284-3 libjpeg62 liblcms1 libltdl3 libmng1 libmpfr1ldbl
libmysqlclient15off liborbit2 libpam-gnome-keyring libpango1.0-0
libpango1.0-common libpaper-utils libpaper1 libperl5.10 libpixman-1-0
libpng12-0 libpoppler3 libqt3-mt libqt4-assistant libqt4-dbus
libqt4-designer libqt4-help libqt4-network libqt4-qt3support libqt4-script
libqt4-sql libqt4-sql-mysql libqt4-svg libqt4-test libqt4-webkit libqt4-xml
libqt4-xmlpatterns libqtcore4 libqtgui4 libsane libsane-extras libsensors3
libslp1 libsm6 libsnmp-base libsnmp15 libstartup-notification0 libsysfs2
libtalloc1 libthai-data libthai0 libtiff4 libts-0.0-0 libwbclient0
libxcb-render-util0 libxcb-render0 libxcomposite1 libxcursor1 libxdamage1
libxext6 libxfixes3 libxfont1 libxft2 libxi6 libxinerama1 libxmu6 libxmuu1
libxrandr2 libxrender1 libxt6 libxxf86vm1 mysql-common openssl
openssl-blacklist poppler-utils psfontmgr psmisc python-dbus
python-elementtree python-gobject python-imaging python-qt3 python-qt4
python-qt4-common python-reportlab python-sip4 python-support qt4-qtconfig
samba-common sane-utils smbclient ssl-cert ttf-bitstream-vera ttf-dejavu
ttf-dejavu-core ttf-dejavu-extra ttf-dustin x-ttcidfont-conf x11-common
xauth xfonts-encodings xfonts-utils
Suggested packages:
cpp-doc gcc-4.3-locales cups-bsd cups-driver-gutenprint xpdf-korean
xpdf-japanese xpdf-chinese-traditional xpdf-chinese-simplified cups-pdf
kdeprint gtklp cups-pt xpp defoma-doc dfontmgr foomatic-db-hpijs
foomatic-db-gutenprint foo2zjs cupsys foomatic-gui hpijs-ppds hplip-doc
openprinting-ppds nas libfreetype6-dev gphoto2 gtkam librsvg2-common
liblcms-utils ttf-kochi-gothic ttf-kochi-mincho ttf-thryomanes ttf-baekmuk
ttf-arphic-gbsn00lp ttf-arphic-bsmi00lp ttf-arphic-gkai00mp
ttf-arphic-bkai00mp libqt3-mt-mysql libqt3-mt-odbc libqt3-mt-psql libqt4-dev
hpoj lm-sensors slpd openslp-doc ca-certificates python-dbus-dbg
python-dbus-doc python-elementtree-doc python-gobject-dbg python-imaging-doc
python-imaging-dbg python-qt3-doc python-qt3-gl python-qt4-dbg pdf-viewer
python-egenix-mxtexttools python-reportlab-doc unpaper smbfs
Recommended packages:
libft-perl cupsys-client lpr lprng pdq rlpr python-renderpm
The following NEW packages will be installed:
avahi-utils cpp cpp-4.3 cups cups-client cups-common cupsddk cupsddk-drivers
defoma fontconfig fontconfig-config foomatic-db foomatic-db-engine
foomatic-filters gconf2 gconf2-common ghostscript ghostscript-x gksu
gnome-keyring gs-common gs-esp gsfonts hicolor-icon-theme hpijs hplip
hplip-data hplip-gui libatk1.0-0 libatk1.0-data libaudio2 libavahi-client3
libavahi-compat-libdnssd1 libcairo2 libcups2 libcupsimage2 libdatrie0
libdbus-glib-1-2 libdirectfb-1.0-0 libdrm2 libexif12 libffi5 libfontconfig1
libfontenc1 libfreetype6 libgconf2-4 libgksu2-0 libgl1-mesa-glx libglade2-0
libglib2.0-0 libglib2.0-data libglu1-mesa libgmp3c2 libgnome-keyring0
libgphoto2-2 libgphoto2-port0 libgs8 libgtk2.0-0 libgtk2.0-bin
libgtk2.0-common libgtop2-7 libgtop2-common libhal-storage1 libhal1 libice6
libidl0 libieee1284-3 libjpeg62 liblcms1 libltdl3 libmng1 libmpfr1ldbl
libmysqlclient15off liborbit2 libpam-gnome-keyring libpango1.0-0
libpango1.0-common libpaper-utils libpaper1 libperl5.10 libpixman-1-0
libpng12-0 libpoppler3 libqt3-mt libqt4-assistant libqt4-dbus
libqt4-designer libqt4-help libqt4-network libqt4-qt3support libqt4-script
libqt4-sql libqt4-sql-mysql libqt4-svg libqt4-test libqt4-webkit libqt4-xml
libqt4-xmlpatterns libqtcore4 libqtgui4 libsane libsane-extras libsensors3
libslp1 libsm6 libsnmp-base libsnmp15 libstartup-notification0 libsysfs2
libtalloc1 libthai-data libthai0 libtiff4 libts-0.0-0 libwbclient0
libxcb-render-util0 libxcb-render0 libxcomposite1 libxcursor1 libxdamage1
libxext6 libxfixes3 libxfont1 libxft2 libxi6 libxinerama1 libxmu6 libxmuu1
libxrandr2 libxrender1 libxt6 libxxf86vm1 mysql-common openssl
openssl-blacklist poppler-utils psfontmgr psmisc python-dbus
python-elementtree python-gobject python-imaging python-qt3 python-qt4
python-qt4-common python-reportlab python-sip4 python-support qt4-qtconfig
samba-common sane-utils smbclient ssl-cert ttf-bitstream-vera ttf-dejavu
ttf-dejavu-core ttf-dejavu-extra ttf-dustin x-ttcidfont-conf x11-common
xauth xfonts-encodings xfonts-utils
0 upgraded, 163 newly installed, 0 to remove and 0 not upgraded.
Need to get 123MB of archives.
After this operation, 332MB of additional disk space will be used.
Do you want to continue [Y/n]?


Setup the printer:


marc@lordshiva:~$ sudo hp-setup -i -a

Done.
marc@lordshiva:~$


Now you want to be able to manage the print server remotely via the web interface, so you’ll have to edit /etc/cups/cupsd.conf.

sudo $EDITOR /etc/cups/cupsd.conf
…find the three places that look like this:
Location /
Location /admin
Location /admin/conf

and add the following after the “Order allow,deny” lines:

Allow @LOCAL

Also change the line from:
Listen localhost:631
to
Port 631

Then restart the cups daemon: sudo /etc/init.d/cups restart

marc@lordshiva:/etc/sane.d$ sudo update-inetd --enable sane-port

Now all you need to do on the system you are going to scan from, edit /etc/sane.d/net.conf and add lordshiva.local (or whatever you named yours ;-)

= Sharing MP3 =

gnump3d is a nice tool to share mp3 files on the home network.

Downloaded gnump3d-3.0.tar.gz from http://www.gnu.org/software/gnump3d/index.html

which needs make…


sudo apt-get install make
sudo apt-get install make
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
make-doc
The following NEW packages will be installed:
make
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0B/385kB of archives.
After this operation, 1233kB of additional disk space will be used.


Back to gnump3…


cd /usr/src/
sudo tar zxvf ~/gnump3d-3.0.tar.gz
cd gnump3d-3.0
sudo make install
install -d //etc/gnump3d
install -d //usr/bin
install -d //usr/share/gnump3d
install -d //usr/local/man/man1
install -d /`perl bin/getlibdir`/gnump3d/plugins
install -d /`perl bin/getlibdir`/gnump3d/lang
install -d //var/log/gnump3d
install -d //var/cache/gnump3d
chmod 777 //var/cache/gnump3d
install -d //var/cache/gnump3d/serving
chmod 777 //var/cache/gnump3d/serving
chmod a+rx /`perl bin/getlibdir`/gnump3d/
chmod a+rx /`perl bin/getlibdir`/gnump3d/plugins
chmod a+rx /`perl bin/getlibdir`/gnump3d/lang
cp lib/gnump3d/*.pm /`perl bin/getlibdir`/gnump3d
cp lib/gnump3d/plugins/*.pm /`perl bin/getlibdir`/gnump3d/plugins
rm /`perl bin/getlibdir`/gnump3d/plugins/bug.pm
rm: cannot remove `//usr/share/perl5/gnump3d/plugins/bug.pm': No such file or directory
make: [install] Error 1 (ignored)
cp lib/gnump3d/lang/*.pm /`perl bin/getlibdir`/gnump3d/lang
cp bin/gnump3d2 //usr/bin
chmod 755 //usr/bin/gnump3d2
ln -sf //usr/bin/gnump3d2 //usr/bin/gnump3d
cp bin/gnump3d-top //usr/bin
chmod 755 //usr/bin/gnump3d-top
cp bin/gnump3d-index //usr/bin
chmod 755 //usr/bin/gnump3d-index
cp man/gnump3d-top.1 //usr/local/man/man1
cp man/gnump3d-index.1 //usr/local/man/man1
cp man/gnump3d.1 //usr/local/man/man1
cp man/gnump3d.conf.1 //usr/local/man/man1
cp -R templates/* //usr/share/gnump3d
chmod -R a+r //usr/share/gnump3d
chmod +rx //usr/share/gnump3d/*/
if [ -e //etc/gnump3d/gnump3d.conf ]; then cp //etc/gnump3d/gnump3d.conf //etc/gnump3d/gnump3d.conf-orig ; fi
sed "s#PLUGINDIR#`perl bin/getlibdir`#g" etc/gnump3d.conf > //etc/gnump3d/gnump3d.conf
cp etc/mime.types //etc/gnump3d
cp etc/file.types //etc/gnump3d
rm -f /`perl bin/getlibdir`/gnump3d/FreezeThaw.pm
rm -f /`perl bin/getlibdir`/gnump3d/playlist.pm
marc@lordshiva:/usr/src/gnump3d-3.0$

Now to configure gnump3 is pretty simple, edit /etc/gnump3d/gnump3d.conf and set root = /media/mp3 or wherever the music is.

To start it up:

sudo gnump3d &

Then point a browser to http://lordshiva.local:8888/ and listen or download music. This comes in very handy for the kids when they need to load up their mp3 players.

= monitoring system =

I like to use munin to keep an eye on how the home systems are doing.


sudo apt-get install munin munin-node munin-plugins-extra apache2
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
apache2-mpm-worker apache2-utils apache2.2-common gawk libapr1 libaprutil1
libdate-manip-perl libhtml-template-perl libio-multiplex-perl
libnet-cidr-perl libnet-server-perl libnet-snmp-perl libpq5 librrd4
librrds-perl rrdtool
Suggested packages:
apache2-doc apache2-suexec apache2-suexec-custom libipc-sharedcache-perl
libio-socket-ssl-perl libcrypt-des-perl libdigest-hmac-perl
libdigest-sha1-perl libio-socket-inet6-perl httpd libwww-perl
liblwp-useragent-determined-perl libnet-irc-perl mysql-client smartmontools
acpi lm-sensors ethtool libdbd-pg-perl logtail libnet-netmask-perl
The following NEW packages will be installed:
apache2 apache2-mpm-worker apache2-utils apache2.2-common gawk libapr1
libaprutil1 libdate-manip-perl libhtml-template-perl libio-multiplex-perl
libnet-cidr-perl libnet-server-perl libnet-snmp-perl libpq5 librrd4
librrds-perl munin munin-node munin-plugins-extra rrdtool
0 upgraded, 20 newly installed, 0 to remove and 0 not upgraded.
Need to get 2144kB/5263kB of archives.
After this operation, 14.4MB of additional disk space will be used.
Do you want to continue [Y/n]?


Now setup munin-node to know what to monitor locally. I like to run munin-node-configure with the –shell option to see what my choices are and then cut-n-paste the ones I’m interested in.


marc@lordshiva:~$ sudo munin-node-configure --shell --families=auto && sudo munin-node-configure --shell --families=contrib && sudo munin-node-configure --shell --families=manual

And then just pick: (jump into a root shell first, sudo -i)

ln -s /usr/share/munin/plugins/apt /etc/munin/plugins/apt
ln -s /usr/share/munin/plugins/apt_all /etc/munin/plugins/apt_all
ln -s /usr/share/munin/plugins/df_abs /etc/munin/plugins/df_abs
ln -s /usr/share/munin/plugins/fw_packets /etc/munin/plugins/fw_packets
ln -s /usr/share/munin/plugins/multips /etc/munin/plugins/multips
ln -s /usr/share/munin/plugins/munin_graph /etc/munin/plugins/munin_graph
ln -s /usr/share/munin/plugins/munin_update /etc/munin/plugins/munin_update
ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_8888
ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_ipp
ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_munin
ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_sane-port
ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_smtp
ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_ssh
ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_sunrpc
ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_www
ln -s /usr/share/munin/plugins/uptime /etc/munin/plugins/uptime


And restart munin-node

sudo /etc/init.d/munin-node restart
Stopping Munin-Node: done.
Starting Munin-Node: done.


Come back later and look at http://lordshiva.local/munin/

= fetchmail =

I pull email from my web hoster, drop a copy of the email and forward a copy to gmail use procmail.

sudo apt-get install fetchmail procmail
marc@lordshiva:~$ sudo apt-get install fetchmail procmail
[sudo] password for marc:
Reading package lists... Done
Building dependency tree
Reading state information... Done
procmail is already the newest version.
The following extra packages will be installed:
ca-certificates
Suggested packages:
fetchmailconf resolvconf
The following NEW packages will be installed:
ca-certificates fetchmail
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 813kB of archives.
After this operation, 2597kB of additional disk space will be used.
Do you want to continue [Y/n]?


My fetchmail configuration looks like this:


cat ~/.fetchmailrc
set logfile /home/marc/fetchmail.log

poll pop.nozell.com
with proto POP3 timeout 600
user 'XXX@XXXX.XXX' there with password 'XXX' is 'marc' here options fetchall


And here is my .procmailrc


cat .procmailrc
LOGFILE=/home/marc/procmail.log
MAILDIR=ImapFolders

:0
Unsorted.Inbox.`date +%Y-%m`


= reconfigure the local mail server =

sudo dpkg-reconfigure exim4-conf

And pick the smarthost option and point it to the appropriate upstream mail server.

= squid =


sudo apt-get install squid
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
squid-common
Suggested packages:
squidclient squid-cgi logcheck-database resolvconf winbind
The following NEW packages will be installed:
squid squid-common
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 497kB/1224kB of archives.
After this operation, 6816kB of additional disk space will be used.
Do you want to continue [Y/n]?


mediawiki / mysql / apache2


root@LordShiva:~# sudo apt-get install mediawiki
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
apache2 apache2-mpm-prefork apache2-utils apache2.2-common libapache2-mod-php5 libapr1 libaprutil1 libdbd-mysql-perl libdbi-perl libhtml-template-perl
libmysqlclient15off libnet-daemon-perl libplrpc-perl libpq5 libterm-readkey-perl mysql-client-5.0 mysql-common mysql-server mysql-server-5.0
mysql-server-core-5.0 php5 php5-cli php5-common php5-mysql psmisc ssl-cert
Suggested packages:
www-browser apache2-doc apache2-suexec apache2-suexec-custom ufw php-pear dbishell libipc-sharedcache-perl libcompress-zlib-perl php5-gd imagemagick
mediawiki-math memcached clamav mysql-doc-5.0 tinyca mailx
The following NEW packages will be installed:
apache2 apache2-mpm-prefork apache2-utils apache2.2-common libapache2-mod-php5 libapr1 libaprutil1 libdbd-mysql-perl libdbi-perl libhtml-template-perl
libmysqlclient15off libnet-daemon-perl libplrpc-perl libpq5 libterm-readkey-perl mediawiki mysql-client-5.0 mysql-common mysql-server mysql-server-5.0
mysql-server-core-5.0 php5 php5-cli php5-common php5-mysql psmisc ssl-cert
0 upgraded, 27 newly installed, 0 to remove and 0 not upgraded.
Need to get 53.6MB/53.6MB of archives.
After this operation, 166MB of additional disk space will be used.
Do you want to continue [Y/n]?

text mode web browsers (elinks / links2)


root@LordShiva:~# apt-get install elinks links2
The following extra packages will be installed:
elinks-data libdirectfb-1.0-0 liblua50 liblualib50 libperl5.10 libpng12-0
libruby1.8 libsysfs2 libtiff4 libts-0.0-0
Suggested packages:
elinks-doc
The following NEW packages will be installed:
elinks elinks-data libdirectfb-1.0-0 liblua50 liblualib50 libperl5.10
libpng12-0 libruby1.8 libsysfs2 libtiff4 libts-0.0-0 links2
0 upgraded, 12 newly installed, 0 to remove and 0 not upgraded.
Need to get 5104kB of archives.
After this operation, 15.4MB of additional disk space will be used.
Do you want to continue [Y/n]?


lanmap

root@LordShiva:~# apt-get install lanmap
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
defoma fontconfig fontconfig-config graphviz libcairo2 libdatrie0
libfontconfig1 libfontenc1 libfreetype6 libgd2-noxpm libgraphviz4 libice6
libltdl7 libpango1.0-0 libpango1.0-common libpcap0.8 libpixman-1-0 libsm6
libthai-data libthai0 libxaw7 libxcb-render-util0 libxcb-render0 libxext6
libxfont1 libxft2 libxmu6 libxpm4 libxrender1 libxt6 ttf-dejavu
ttf-dejavu-core ttf-dejavu-extra ttf-liberation x-ttcidfont-conf x11-common
xfonts-encodings xfonts-utils
Suggested packages:
defoma-doc psfontmgr dfontmgr libft-perl gsfonts graphviz-doc libgd-tools
ttf-japanese-gothic ttf-japanese-mincho ttf-thryomanes ttf-baekmuk
ttf-arphic-gbsn00lp ttf-arphic-bsmi00lp ttf-arphic-gkai00mp
ttf-arphic-bkai00mp
The following NEW packages will be installed:
defoma fontconfig fontconfig-config graphviz lanmap libcairo2 libdatrie0
libfontconfig1 libfontenc1 libfreetype6 libgd2-noxpm libgraphviz4 libice6
libltdl7 libpango1.0-0 libpango1.0-common libpcap0.8 libpixman-1-0 libsm6
libthai-data libthai0 libxaw7 libxcb-render-util0 libxcb-render0 libxext6
libxfont1 libxft2 libxmu6 libxpm4 libxrender1 libxt6 ttf-dejavu
ttf-dejavu-core ttf-dejavu-extra ttf-liberation x-ttcidfont-conf x11-common
xfonts-encodings xfonts-utils
0 upgraded, 39 newly installed, 0 to remove and 0 not upgraded.
Need to get 11.4MB of archives.
After this operation, 24.6MB of additional disk space will be used.


screen

marc@LordShiva:~$ sudo apt-get install screen
Reading package lists... Done
Building dependency tree
Reading state information... Done

The following extra packages will be installed:
gettext-base iso-codes python-apt python-central python-newt screen-profiles update-motd update-notifier-common
Suggested packages:
isoquery python-apt-dbg python-gtk2 python-vte python-newt-dbg screen-profiles-extras
The following NEW packages will be installed:
gettext-base iso-codes python-apt python-central python-newt screen screen-profiles update-motd update-notifier-common
0 upgraded, 9 newly installed, 0 to remove and 0 not upgraded.
Need to get 2947kB of archives.
After this operation, 14.6MB of additional disk space will be used.

Seems like a bunch of extra stuff… update-motd?

nfs

Installing NFS to hack around. Eventually storage on lordshiva will be via usb disks.


sudo root@LordShiva:~# sudo apt-get install nfs-kernel-server
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
libevent1 libgssglue1 libnfsidmap2 librpcsecgss3 nfs-common portmap
The following NEW packages will be installed:
libevent1 libgssglue1 libnfsidmap2 librpcsecgss3 nfs-common
nfs-kernel-server portmap
0 upgraded, 7 newly installed, 0 to remove and 0 not upgraded.
Need to get 503kB of archives.
After this operation, 1548kB of additional disk space will be used.
Do you want to continue [Y/n]?


I made sure the nfs-kernel-server was also installed on where the disks were and added to /etc/exports something like:

/home/Music lordshiva(ro,sync,no_subtree_check)

and ran sudo exportfs -av

The on the SheevaPlug:

sudo mkdir -p /nfs/Music
sudo mount homeserver:/home/Music /nfs/Music

And updated /etc/gnump3/gnump3.conf to point to /nfs/Music

updating what munin monitors

Running the following commands will make some recommendations on additional things munin can monitor.

# munin-node-configure --shell --families auto
# munin-node-configure --shell --families contrib
# munin-node-configure --shell --families manual

Just cut-n-paste the ones you want to enable into a root shell. Remember to restart the daemon too.

root@LordShiva:~# ln -s /usr/share/munin/plugins/ntp_offset /etc/munin/plugins/ntp_offset
root@LordShiva:~# ln -s /usr/share/munin/plugins/ntp_ /etc/munin/plugins/ntp_europium_canonical_com
root@LordShiva:~# ln -s /usr/share/munin/plugins/ntp_states /etc/munin/plugins/ntp_states
root@LordShiva:~# ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_ssh
root@LordShiva:~# ln -s /usr/share/munin/plugins/port_ /etc/munin/plugins/port_www
root@LordShiva:~# /etc/init.d/munin-node restart


SheevaPlug as a mini-printserver

The pre-installed Ubuntu doesn’t include any kernel modules, but thought I’d try using the SheevaPlug as a mini-print/scan server for my hp PSC 1510 All-in-One printer/scanner.

Install cups which pulls in a ton of other packages as well as the open source print management tools from Hewlett-Packard, hplip

root@LordShiva:~# apt-get install cups hplip
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
acl avahi-utils bc cups-client cups-common cupsddk cupsddk-drivers foomatic-db foomatic-db-engine foomatic-filters ghostscript gsfonts hal hal-info hdparm hpijs
hplip-data libavahi-client3 libavahi-compat-libdnssd1 libcupsimage2 libexif12 libffi5 libgphoto2-2 libgphoto2-port0 libgs8 libhal-storage1 libhal1 libieee1284-3
libijs-0.35 libpaper-utils libpaper1 libpci3 libpciaccess0 libpolkit-dbus2 libpolkit-grant2 libpoppler4 libsane libsensors3 libslp1 libsnmp-base libsnmp15
pciutils pm-utils policykit poppler-utils powermgmt-base psfontmgr python-dbus python-gobject python-imaging python-support radeontool sane-utils smartdimmer
smbclient ttf-freefont wget
Suggested packages:
cups-bsd cups-driver-gutenprint xpdf-korean xpdf-japanese xpdf-chinese-traditional xpdf-chinese-simplified cups-pdf kdeprint gtklp cups-pt xpp foomatic-db-hpijs
foomatic-db-gutenprint foo2zjs openprinting-ppds foomatic-gui ghostscript-x gnome-device-manager apmd hpijs-ppds hplip-doc hplip-gui gphoto2 gtkam hpoj
libsane-extras lm-sensors slpd openslp-doc cpufrequtils policykit-gnome python-dbus-doc python-dbus-dbg python-gobject-dbg python-imaging-doc python-imaging-dbg
unpaper smbfs
Recommended packages:
vbetool
The following NEW packages will be installed:
acl avahi-utils bc cups cups-client cups-common cupsddk cupsddk-drivers foomatic-db foomatic-db-engine foomatic-filters ghostscript gsfonts hal hal-info hdparm
hpijs hplip hplip-data libavahi-client3 libavahi-compat-libdnssd1 libcupsimage2 libexif12 libffi5 libgphoto2-2 libgphoto2-port0 libgs8 libhal-storage1 libhal1
libieee1284-3 libijs-0.35 libpaper-utils libpaper1 libpci3 libpciaccess0 libpolkit-dbus2 libpolkit-grant2 libpoppler4 libsane libsensors3 libslp1 libsnmp-base
libsnmp15 pciutils pm-utils policykit poppler-utils powermgmt-base psfontmgr python-dbus python-gobject python-imaging python-support radeontool sane-utils
smartdimmer smbclient ttf-freefont wget
0 upgraded, 59 newly installed, 0 to remove and 0 not upgraded.
Need to get 38.4MB of archives.
After this operation, 127MB of additional disk space will be used.
Do you want to continue [Y/n]?

Hmm, during the install I plugged in the printer and checked dmesg to see if it was recognized. The lanmap process appears to have had a problem allocating memory:


lanmap: page allocation failure. order:5, mode:0xc0d0
[] (dump_stack+0x0/0x14) from [] (__alloc_pages+0x28c/0x2a0)
[] (__alloc_pages+0x0/0x2a0) from [] (__get_free_pages+0x28/0x5c)
[] (__get_free_pages+0x0/0x5c) from [] (packet_set_ring+0xc4/0x30c)
[] (packet_set_ring+0x0/0x30c) from [] (packet_setsockopt+0x34c/0x4b4)
[] (packet_setsockopt+0x0/0x4b4) from [] (sys_setsockopt+0x84/0xa8)
[] (sys_setsockopt+0x0/0xa8) from [] (ret_fast_syscall+0x0/0x2c)
r8:c0027628 r7:00000126 r6:0004f978 r5:0000005c r4:00000010
Mem-info:
DMA per-cpu:
CPU 0: Hot: hi: 186, btch: 31 usd: 180 Cold: hi: 62, btch: 15 usd: 58
Active:54514 inactive:39796 dirty:0 writeback:0 unstable:0
free:26150 slab:6191 mapped:4044 pagetables:328 bounce:0
DMA free:104600kB min:2884kB low:3604kB high:4324kB active:218056kB inactive:159184kB present:520192kB pages_scanned:0 all_unreclaimable? no
lowmem_reserve[]: 0 0
DMA: 8554*4kB 4492*8kB 1155*16kB 399*32kB 48*64kB 1*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 104600kB
Swap cache: add 0, delete 0, find 0/0, race 0+0
Free swap = 0kB
Total swap = 0kB
Free swap: 0kB
131072 pages of RAM
26907 free pages
2296 reserved pages
6165 slab pages
20272 pages shared
0 pages swap cached
device eth0 left promiscuous mode


When I tried to killall lanmap, ssh sessions hung. I could get in via console still. The network seemed to be a bit wonky, so rebooted.

Hmm, scary kernel messsages

This is after the reboot and seems to be when hal is starting up on install. Install is slowing continuing.


Unable to handle kernel paging request at virtual address 1a364e25
pgd = c9e2c000
[1a364e25] *pgd=00000000
Internal error: Oops: 5 [#1]
Modules linked in:
CPU: 0 Not tainted (2.6.22.18 #1)
PC is at strnlen+0x20/0x34
LR is at vsnprintf+0x314/0x5b4
pc : [] lr : [] psr: a0000013
sp : ca99bdc0 ip : ca99bdd0 fp : ca99bdcc
r10: ffffffff r9 : ffffffff r8 : 00000000
r7 : ffffffff r6 : caa68041 r5 : 1a364e25 r4 : ca99be40
r3 : c00c8994 r2 : 1a364e25 r1 : fffffffe r0 : 1a364e25
Flags: NzCv IRQs on FIQs on Mode SVC_32 Segment user
Control: 0005317f Table: 09e2c000 DAC: 00000015
Process udevadm (pid: 4301, stack limit = 0xca99a268)
Stack: (0xca99bdc0 to 0xca99c000)
bdc0: ca99be1c ca99bdd0 c02414f8 c0240218 c023db48 ca99bdec ca99bdfc ca99bdf0
bde0: c027369c 35597fbe caa68041 c00d321a ca99be44 00000014 00000041 d4502000
be00: caa68000 c03ed298 00000000 c03fc7a4 ca99be38 ca99be20 c0241864 c02411f4
be20: c03ed240 ca99be40 caa68000 ca99beec ca99be48 c026ef10 c024184c c00d3219
be40: 1a364e25 1a364e25 d4502000 00001000 d4502000 d450200c d4502020 d4502033
be60: 1a364e25 00000044 000280d0 c03f1574 00000000 00000000 ffffff9c c03f1574
be80: c08927e8 000080d0 c03f1570 ce818ac0 00000000 00000000 ca99beec ca99bea8
bea0: c01472ec c0146724 000280d0 00000010 c0581d00 ca99a000 40020000 4001f000
bec0: 00100073 ca9e82a0 c08927e8 c03ed240 ca9e82a0 c08927e8 c03ed240 ca9e82c0
bee0: ca99befc ca99bef0 c026e810 c026ee28 ca99bf44 ca99bf00 c019ca14 c026e7fc
bf00: ca99bf74 ca99bf10 c0153c60 ca99bf70 00001000 4001f000 00000000 d48a7700
bf20: 4001f000 ca99bf70 00001000 4001f000 ca99a000 00000000 ca99bf6c ca99bf48
bf40: c01625e8 c019c964 00000000 00000000 00000000 00000000 d48a7700 00001000
bf60: ca99bfa4 ca99bf70 c01629fc c0162540 00000000 00000000 00000022 00000000
bf80: ffffffff 2a024d18 2a024d18 000007ff 00000003 c0027628 00000000 ca99bfa8
bfa0: c0027480 c01629c8 2a024d18 2a024d18 00000007 4001f000 00001000 00000000
bfc0: 2a024d18 2a024d18 000007ff 00000003 bece6f0c 0000000a 4017f000 bece6f0c
bfe0: 40170000 bece6e68 400aab04 400fe3fc 60000010 00000007 00002031 00002431
Backtrace:
[] (strnlen+0x0/0x34) from [] (vsnprintf+0x314/0x5b4)
[] (vsnprintf+0x0/0x5b4) from [] (sprintf+0x2c/0x34)
[] (sprintf+0x0/0x34) from [] (show_uevent+0xf8/0x140)
r3:1a364e25 r2:1a364e25 r1:c00d3219
[] (show_uevent+0x0/0x140) from [] (dev_attr_show+0x24/0x28)
r7:ca9e82c0 r6:c03ed240 r5:c08927e8 r4:ca9e82a0
[] (dev_attr_show+0x0/0x28) from [] (sysfs_read_file+0xc0/0x130)
[] (sysfs_read_file+0x0/0x130) from [] (vfs_read+0xb8/0x148)
[] (vfs_read+0x0/0x148) from [] (sys_read+0x44/0x70)
r7:00001000 r6:d48a7700 r5:00000000 r4:00000000
[] (sys_read+0x0/0x70) from [] (ret_fast_syscall+0x0/0x2c)
r8:c0027628 r7:00000003 r6:000007ff r5:2a024d18 r4:2a024d18
Code: ea000000 e2800001 e2511001 3a000002 (e5d03000)

I’ve removed just hal, apt-get --purge remove hal

Hmm, now it appears that the pre-install Ubuntu/Jaunty doesn’t include any kernel loadablel modules for things like USB printers. Time to install stock Debian on this beastie.

Hardware : Feroceon-KW
Revision : 0000
Serial : 0000000000000000


Bus 001 Device 001: ID 0000:0000
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 9 Hub
bDeviceSubClass 0 Unused
bDeviceProtocol 1 Single TT
bMaxPacketSize0 64
idVendor 0x0000
idProduct 0x0000
bcdDevice 2.06
iManufacturer 3 Linux 2.6.22.18 ehci_hcd
iProduct 2 Marvell Orion EHCI
iSerial 1 ehci_marvell.70059
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 25
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 0
bmAttributes 0xe0
Self Powered
Remote Wakeup
MaxPower 0mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 1
bInterfaceClass 9 Hub
bInterfaceSubClass 0 Unused
bInterfaceProtocol 0 Full speed (or root) hub
iInterface 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x0004 1x 4 bytes
bInterval 12
Hub Descriptor:
bLength 9
bDescriptorType 41
nNbrPorts 1
wHubCharacteristic 0x0009
Per-port power switching
Per-port overcurrent protection
TT think time 8 FS bits
bPwrOn2PwrGood 10 * 2 milli seconds
bHubContrCurrent 0 milli Ampere
DeviceRemovable 0x00
PortPwrCtrlMask 0xff
Hub Port Status:
Port 1: 0000.0100 power
Device Status: 0x0001
Self Powered
root@LordShiva:~#



root@LordShiva:~# more df.orig
Filesystem Size Used Avail Use% Mounted on
rootfs 507M 148M 360M 30% /
tmpfs 252M 0 252M 0% /lib/init/rw
varrun 252M 40K 252M 1% /var/run
varlock 252M 0 252M 0% /var/lock
udev 252M 16K 252M 1% /dev
tmpfs 252M 0 252M 0% /dev/shm
tmpfs 252M 22M 231M 9% /var/cache/apt